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DETAILED ACTION 

1. This office action is in responsive to the paper (RCE) filed on October 24 th , 2005. 
Claims 1 - 23, 25 and 26 are presented for examination. 

Claims 1 - 23, 25 and 26 are rejected. 
Claim 24 is canceled. 
Claim 26 is newly presented. 

Claim Rejections - 35 USC § 102 
The following is a quotation of the appropriate paragraphs of 35 U.S. C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 
(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed in the 
United States before the invention by the applicant for patent or (2) a patent granted on an application for patent by 
another filed in the United States before the invention by the applicant for patent, except that an international application 
filed under the treaty defined in section 351(a) shall have the effects for purposes of this subsection of an application filed 
in the United States only if the international application designated the United States and was published under Article 
2 1 (2) of such treaty in the English language. 

2. Claims 1 - 23, 25 and 26 are rejected under 35 U.S.C, 102(e) as being anticipated by 
David W. Connelly et al. (U.S. Patent No. 6,385,722, and referred to as Connelly hereinafter). 

Applicants broadly claim first, second, third and forth process, also an identifier, a system 
initialization process, a call intercepting step, a running operating system kernel and a modified 
loader program in computer system. According to applicants' specification, this invention related 
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generally to virtual computer processes, and specifically to associating an identifier with each of 
a plurality of processes, [Page 1] an ISP to be able to provide multiple server application on a 
single physical host computer, [Page 2] and using an identifier to prevent external accesses to 
those restricted data in database. 

Connelly teaches, a method and a system for limit access to program files in a shared 
library file using a class loader generates a selective interface between an external process and a 
program file (class definition) in the shared library, preventing external processes from loading 
parts of the shared library that were meant to remain private. Further teaches, loading a program 
file, such as a class definition, from the shared library and generate an interface (object) to the 
loaded program file. A determination of whether the program file can be exported is performed 
based on a status indicator associated with the interface. The interface limits access to the 
program file if it is determined that the program file cannot be exported, [see Abstract] 

For example, Connelly teaches, using a class loader to limit access to parts of a shared 
library. The class loader generates an interface between external processes seeking to access a 
program file in the library, loading a program file from a shared software library ... the program 
is a class definition loaded by a class loader. Next, an interface to the loaded program file is 
generated ... the interface has a status indicator, preferably determined by executing a status 
method, is used to determine if the program file can be exported. If the program file cannot be 
exported based on the status indicator, access to the program file is limited, or the program file is 
returned to a requesting process. [Col. 2, Lines 16-39] 

Also, Connelly teaches, a processor is operative to load the object class definition from 
the shared library on the memory storage device using the class loader. Once the appropriate 
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object class definition has been located within the shared library and loaded, the processor is 
further operative to create an instance of an interface object in the memory storage device 
typically by calling a package method within the class loader. The interface object is associated 
with the object class definition and includes a status method created by the processor as part of 
the interface object in the memory storage device. The status method defines a function that 
designates if the object class definition is accessible by an external process running on the 
processor. The processor is also operative to call the status method to determine if the object 
class definition is designated to be accessible to the external process. Finally, the processor is 
capable of limiting access to the object class definition if the executed status method indicates 
the object class definition is not designated to be accessible to the external process. [Col. 1, Lines 
47 - 65] 

Connelly further detailed described in Introduction that a request for a program file (such 
as a class definition) is received by a class loader from an executing process (such as an applet) 
external to a shared library. In response to receiving the request, the class loader loads the 
appropriate program file from the shared library and generates an interface (such as an interface 
object) to the loaded program file. The interface has a status indicator (such as a status method), 
which provides an indication of whether the program file can be exported to the external process. 
Based upon the value of the status indicator, access to the loaded program file is limited via the 
generated interface to the program file. If access to the program file is limited, the executing 
process is denied access to the program file. Otherwise, the executing process receives access to 
the program file via the interface. Thus, a class loader is utilized to not only load the correct and 



Application/Control Number: 09/61 1,877 Page 5 

Art Unit: 2121 

appropriate class definition but to also provide the ability to limit access to those parts of a 
shared library that are meant to be only internally accessed. [Col. 3, Line 56 - Col. 4, Line 7] 

In "Computer Architecture" paragraph, Connelly teaches, "in general, the JVM acts like 
an abstract computing machine, receiving instructions from programs (such as applets) in the 
form of bytecodes. A bytecode is essentially a compiled format for a general purpose program, 
such as a program written in the Java, programming language. Once the instructions or 
bytecodes have been received, the JVM interprets these bytecodes by dynamically converting 
them into a form for execution, such as object code, and executing them." [Col. 4, Lines 35 - 43] 
Further, "during execution of a program module, VM 126 may encounter a symbolic reference to 
an object class that has yet to be loaded. In such a situation, VM 126 typically delegates the task 
of loading the appropriate program files to a class loader. [Col. 4, Lines 51-55, and Fig. 1] 

Further detail related subject matter can be found in Connelly [Col. 5, 6, 9 and 10] 
"Access Limiting System" and "Access Limiting Process" paragraphs. 

Response to Amendment 
Claim Rejections - 35 USC $ 102 

3. The 102(e) rejection based on Coile reference in forth office action has been withdrawn. 
Yet, new 102(e) rejection based on Connelly reference has been cited in current office action. 
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Conclusion 



4. 



Any inquiry concerning this communication or earlier communications from the 



examiner should be directed to Sunray Chang whose telephone number is (571) 272-3682. The 
examiner can normally be reached on M-F 7:00-4:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Anthony Knight can be reached on (571) 272-3687. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Any inquiry of a general nature or relating to the status of this application or proceeding 
should be directed to the receptionist whose telephone number is 703-746-3506. 



Sunray Chang 

Patent Examiner 

Group Art Unit 2121 

Technology Center 2100 

U.S. Patent and Trademark Office 




Group 3900 



December 15, 2005 



